Product reservoir validation system

ABSTRACT

A system and method of authenticating a replaceable product reservoir for use in a product dispenser includes incorporating a data storage device into the replaceable product reservoir where the dispenser control reads data from the storage device to verify that the correct replaceable product reservoir has been installed in the product dispenser.

RELATED APPLICATIONS

The present application is a continuation of, and claims priority to andthe benefits of U.S. Non-Provisional application Ser. No. 15/351,982,which was filed on Nov. 15, 2016 and which will issue as U.S. Pat. No.10,459,460 on Oct. 29, 2019, and which is incorporated herein byreference in its entirety. This application also claims priority to, andthe benefits of, U.S. Provisional Patent Application Ser. No. 62/255,690filed on Nov. 16, 2015 and titled Product Reservoir Validation System,which is incorporated herein by reference in its entirety.

FIELD OF THE INVENTION

The present invention relates generally to systems and methods forauthenticating a replaceable product reservoir for use with a productdispenser, and in particular to systems and methods for reading andwriting data to memory devices incorporated into the replaceable productreservoir.

BACKGROUND OF THE INVENTION

It is well known to provide dispensers in public areas such ashospitals, bathrooms, healthcare facilities and factories. Dispensersdistribute products such as soap, hand sanitizers, and lotions. Somedispensers are designed with a manually actuated pump where the userpushes or pulls a lever to dispense a quantity of product into theuser's hands. “Hands-free” dispensers are also known. For these types ofdispensers, the user places their hand underneath the dispenser where asensor is located. The sensor signals an onboard controller that theuser's hands are properly positioned and subsequently initiates adispense event.

With the discovery of germ-laden biofilms, many companies in an effortto dispense sanitary products manufacture dispensers that usereplaceable product reservoirs, also known as refill containers orrefill units. The product reservoirs are filled and sealed in a sanitaryenvironment. In many cases, the reservoir comes with a disposable pumpand nozzle. In this way when the dispenser is replenished, every partwetted by product is replaced thereby eliminating or greatly reducingthe generation of biofilms.

Manufacturers of dispensers and dispensable products often enlistdistributors to install and service their dispensers. The manufacturersrely on distributors to place the correct refill container in thedispenser housing. It would be problematic, for example, if hospitalpersonnel receive dispensed moisturizing lotion when the user needs andis expecting hand sanitizer. In the past, manufacturers have provided“keyed” systems for each type of fluid refill container. The keyedcomponents match a corresponding structure on the fluid dispenser. Thisensures compatibility of the product with the dispenser.

Additionally, manufacturers and distributors prefer dispensers withkeyed systems to prevent individuals from installing an unauthorizedproduct, commonly referred to as “stuffing.” Stuffing prevents themanufacturer and the distributor from ensuring that their dispensers aredispensing their products. Also, stuffing results in user's notreceiving the product that they believe they are receiving.

Prior art systems, however, have been ineffective against users intenton bypassing keyed systems. Mechanical keys and some electrical types ofkeys can be bypassed and the refill containers reused. This isespecially detrimental for products that may develop bio-films whenexposed to the atmosphere or become contaminated. In other situations,keyed systems that read tags or other indicia applied to the refillcontainer can be circumvented by applying a counterfeit tag to anunauthorized refill container.

What is needed is an anti-stuffing system that can't be bypassed orcounterfeited. The embodiments of the invention described below obviatethe aforementioned problems.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 depicts a product dispenser according to the embodiments of thesubject invention.

FIG. 2 depicts an opened product dispenser showing the dispenser'sinterior according to the embodiments of the subject invention.

FIG. 3 depicts a product reservoir installed in a product dispenser,according to the embodiments of the subject invention.

FIG. 4 depicts a schematic representation of a data storage deviceincorporated into a product reservoir, and a dispenser controller inoperative communication with the data storage device, according to theembodiments of the subject invention.

FIG. 5 depicts a schematic representation of status data stored in adata storage device and threshold data stored in the dispenser control,according to the embodiments of the subject invention.

FIG. 6 depicts an exploded view of a data storage device incorporatedinto a refill unit, according to the embodiments of the subjectinvention.

FIG. 7 depicts a schematic representation of a wireless communicationdevice, a power source, a logic processor and memory incorporated into arefill unit, according to the embodiments of the subject invention.

FIG. 8 depicts a logic processor and memory incorporated into a refillunit where the logic processor is schematically shown to be directlyconnected to a dispenser control, according to the embodiments of thesubject invention.

FIG. 9 depicts a diagram showing a method of authenticating areplaceable product reservoir for use in a product dispenser, accordingto the embodiments of the subject invention.

DETAILED DESCRIPTION

Exemplary embodiments of the present invention relate to authenticatingsystems for authenticating refill units. It will be appreciated thatdifferent manifestations of product dispensers are to be construed asfalling within the scope of protection sought by the claimed subjectmatter, examples of which include wall-mounted dispensers,counter-mounted dispensers and hand-held dispensers.

An exemplary product dispenser 10 is depicted in FIG. 1. Dispenser 10dispenses a measured amount of product according to the embodiments ofthe subject invention. The product dispenser 10 dispenses hand careproducts, such as, for example, soap, lotion or sanitizers, however,other products, granular or liquid, may similarly be dispensed from theproduct dispenser 10.

As illustrated in FIGS. 1 through 3, the product dispenser 10 includes adispenser housing 14 also interchangeably referred to as a base 14. Thehousing 14 or base 14 is made of one or more walls 15 constructed tosupport the components of the product dispenser 10. Plastic may be usedfor cost-effective manufacturing of the base 14, as well as othercomponents of the system. A product reservoir 26, which may be readilyreplaceable, is received by the base 14 and may incorporate a pump 29for dispensing product in a manner known in the art. At a rear side 16of the base 14, a mounting bracket or mounting holes 17 (shown in FIG.2) are included for attaching the dispenser 10 to a wall, a table, adispenser stand or other supporting structure, not shown in the figures.

The product dispenser 10 includes a dispenser cover 18 that is connectedto the base 14. The cover 18 is pivotally connected to the base 14 viahinge 19 and secured in place by way of a latch 21. In some embodiments,the base 14 and cover 18 close together to form an enclosure that limitsimmediate access to the product dispenser 10. The latch 21 may include alock and key to prevent access by unauthorized personnel.

The base 14 is designed to securely receive the product reservoir 26.The walls 15 of the base 14 may be constructed to form a concave region20 at one end of the product dispenser 10 and function to hold thereservoir 26 in place during use. In some embodiments, the replaceablereservoir 26, pump 29 and nozzle 40 are a single unit and arecollectively referred to herein as a refill unit 27. In someembodiments, reservoir 26 is removable and replaceable without removingand replacing pump 29 and nozzle 40. Once installed, a manuallyactivated push bar (not shown) may actuate the pump 29 by direct contactor contact through a series of linkages, also not shown in the figures.Alternatively, the pump 29 may be activated by a pump actuator 30 (shownin FIG. 3) via couplings or linkages which engage the pump 29 andthereby dispense product. Actuation in this embodiment may be initiatedby a sensor 47 configured to detect the presence of a user's hand inproximity to the nozzle 40 (reference FIG. 1). Alternative embodimentsare contemplated where actuation of a dispensing event may be initiatedby depressing an electronic switch, or other activation known means.Those skilled in the art will appreciate that a dispenser control may berequired to actuate the pump 29.

The pump 29 may be a fluid piston pump 34. In some embodiments, the pump29, 34 is secured to the reservoir 26 and may be removed with thereservoir 26 when replaced with another refill unit 27, as describedabove. In another embodiment, the pump 29, 34 may be attached to thebase 14 of the product dispenser 10. In these exemplary embodiments,when the reservoir 26 is replaced, the outlet of the product reservoir26 is fluidly connected to the inlet 28 of the pump 29, 34 (referenceFIG. 6). Other types of pumps may be used with the product dispenser 10,including but not limited to: peristaltic pumps, positive displacementpumps, dome pumps, diaphragm pumps, and the like.

The pump actuator 30 may include an electrically powered motor 31, suchas, for example, an electrically-powered DC motor 31. Skilled artisanswill understand that the DC motor 31 may be driven by a full duty-cycleDC signal, a PWM (pulse width modulated) signal or other electricalsignal configuration as chosen with sound judgment. Other types ofmotors/actuators may be incorporated for use with the product dispenser10, including but not limited to: AC motors or pneumatic actuators.

The product dispenser 10 may further include a power source 50. Thepower source 50 may include, either individually or in combination of,any of the following: mains power, solar or photoelectric power, one ormore disposable or rechargeable batteries, power harvested fromtemperature differential or electro-magnetic waves, and the like. Theexemplary embodiments described and illustrated herein discusselectrochemical cell batteries 51 (reference FIG. 2), which areexemplary in nature and should not be construed as limiting. In oneparticular embodiment, the product dispenser 10 includes an onboardpower source 50, i.e. batteries 51, which are received by the base 14 orcover 18. The batteries 51 may be removed when depleted of energy andreplaced with new batteries. In some exemplary embodiments, thebatteries 51 need not be directly mounted to or received by the productdispenser 10, but may be carried on the refill unit 27 and received orconnected to the dispenser 10. In this exemplary embodiment, when thereservoir 26 or refill unit 27 is replaced, the product dispenser 10 isautomatically resupplied with fresh batteries 51. Energy from the powersource 50 is used to provide operating power to the product dispenser10, e.g. to operate the motor 30, to provide power to the dispensercontrol 60 or to enable operation of sensors 47. In some embodiments,multiple power sources are provided, such as, for example, one on thedispenser 10 and one on the refill unit 27.

With reference now to FIGS. 4 and 5, a dispenser control (also referredto as a controller) is shown schematically as represented by referencenumber 60. In general, the dispenser control 60 manages operations ofthe product dispenser 10. In some embodiments, dispenser control 60 usesa logic processor 62 (reference FIG. 5) to operate the product dispenser10. The logic processor 62 includes one or more inputs 61 and/or outputs63 that in circuit communications with other components of the productdispenser 10.

“Circuit communication” indicates a communicative relationship betweendevices. Direct electrical, electromagnetic and optical connections andindirect electrical, electromagnetic and optical connections areexamples of circuit communication. Two devices are in circuitcommunication if a signal from one is received by the other, regardlessof whether the signal is modified by some other device. For example, twodevices separated by one or more of the following—amplifiers, filters,transformers, optoisolators, digital or analog buffers, analogintegrators, other electronic circuitry, fiber optic transceivers orsatellites—are in circuit communication if a signal from one iscommunicated to the other, even though the signal is modified by theintermediate device(s). As another example, an electromagnetic sensor isin circuit communication with a signal if it receives electromagneticradiation from the signal. As a final example, two devices not directlyconnected to each other, but both capable of interfacing with a thirddevice, such as, for example, a CPU, are in circuit communication.

“Logic,” as used herein, is synonymous with “circuit” or “circuitry” andincludes, but is not limited to, hardware, firmware, software and/orcombinations of each to perform a function(s) or an action(s). Forexample, based on a desired application or needs, logic may include asoftware controlled microprocessor or microcontroller, discrete logic,such as an application specific integrated circuit (ASIC) or otherprogrammed logic device. Logic may also be fully embodied as software.The circuits identified and described herein may have many differentconfigurations to perform the desired functions.

“Signal,” includes, but is not limited to one or more electricalsignals, analog or digital signals, one or more computer instructions, abit or bit stream, or the like.

Any values identified in the detailed description are exemplary and theyare determined as needed for a particular dispenser and/or refilldesign. Accordingly, the inventive concepts disclosed and claimed hereinare not limited to the particular values or ranges of values used todescribe the embodiments disclosed herein.

In one particular embodiment, the dispenser control 60 includes anoutput 63 that is electrically communicated to the motor 31. Output 63may comprise one or more electrical signals that direct and regulate theflow of power from the batteries 51 to the motor 31. Electricalcontacts, relays, transistors or other types of electrical switchingdevices may be used to selectively deliver power to the motor 31. Thedispenser control 60 sends out an electrical signal that may beamplified and/or modulated to control the motor 31. The motor 31 in-turnengages the pump 29 to dispense product from the nozzle 40.

As mentioned above, a sensor 47 may be used to detect a user's hands inproximity to the nozzle 40. The sensor 47 is in circuit communicationwith dispenser control 60. The sensor signals may comprise analog ordigital signals, which are communicated to an input 61 of the dispensercontrol 60. When a user approaches the product dispenser 10, the sensor47 triggers or initiates activation of a dispense event by sending asignal to the dispenser control 60, after which the dispenser control 60processes the signal and selectively sends an output 63 to actuate themotor 31.

With continued reference to FIG. 4 and now also to FIG. 5, the logicprocessor 62 of the dispenser control 60 may be any type of processor,such as, for example, a microprocessor 62′ or a microcontroller 62′.Depending on the type of logic processor 62 used, the dispenser control60 may include peripheral circuitry 66 to facilitate operation of thelogic processor 62. Peripheral circuitry 66 may include: powerregulators, analog-to-digital converters, shift registers and the like.Other types of electronic circuitry may also be included for use withthe logic processor 62 and may include memory 64, either volatile ornonvolatile, in the form of RAM, ROM and flash memory 64 (e.g. EEPROM64). All of which would be in circuit communication with logic processor62.

A microprocessor 62′ or a microcontroller 62′ functions to execute codedinstructions or sequences of coded instructions, e.g. a programmedalgorithm. In exemplary embodiments, the microprocessor 62′ ormicrocontroller 62′ is programmed to receive inputs, perform one or morelogical operations based on those inputs and accordingly direct outputsto a connected device. In the exemplary embodiments described above, thedispenser control 60 receives an input from the sensor 47 andselectively directs an output to enable operation of the motor 31.

Still referencing FIG. 4, a data storage device 68 is incorporated withthe replaceable product reservoir 26. The term replaceable productreservoir 26 may be used interchangeably with refill unit 27. The datastorage device 68 may be fixedly attached to a wall of the reservoir 26,a collar or other structural element of the refill unit 27.Alternatively, it may be integrated into one of the components of therefill unit 27. Any manner of incorporating the data storage device 68may be used.

The data storage device 68 includes memory 69, which may be ROM (ReadOnly Memory), read-write memory, flash memory, or any other type ofmemory suitable to perform the functions described herein. In someexemplary embodiments, data stored on the read-write storage device 68may be modified, erased or added to. In some embodiments, memory 69 maybe memory, such as, for example, flash memory which does not requirethat a power source be continually connected to the memory in order tomaintain viability of the data.

Referencing FIGS. 5 and 6, the refill unit 27 includes circuitrycommunicating with the dispenser control 60. The communication betweenthe refill unit 27 and the dispenser control 60 is bi-directional, wheredata is read from and written to the data storage device 68. In someembodiments, the refill unit 27 communicates with the dispenser control60 by direct contact with electrical conductors 72. Other embodimentscontemplated include wireless data communication devices, which utilizenear-field communication techniques, such as Blue-tooth. Other forms ofwireless communication may be employed including RF or Infra-Redcommunication. In this embodiment, the refill unit 27 and the dispensercontrol 60 will each include wireless transmitter-receiver componentsdesignated by numeral 74.

The data storage device 68 stores data related to the particular refillunit 27 that it is associated with. Data contained in the data storagedevice 68 may be retrieved by the dispenser control 60, as will bediscussed further below. The term “status data” is used to describe oneor more items of data that are indicative of the status or acharacteristic of the product reservoir, container and or refill unit.Exemplary data that may be status data is data or information such as,for example, a refill identification number, a serial number, producttype identifier (e.g. hand soap, hand sanitizer, lotion), batch number,manufacturing location, product expiration date, manufacture date,container volume, volume of product remaining in the container, volumeof product removed from the container, number of dispenses remaining inthe container, number of dispenses dispensed from the container, whetherthe refill unit was previously used, dispenser identification numberthat previously used the refill unit, fluid viscosity, battery chargestatus, and the like. In addition, the term status data may includeadditional data that is indicative of one or more specific distributorsthat are authorized to sell or supply the particular refill unit. Theexemplary status data above may be for any of the product reservoir,container and/or refill unit, even though only one of these werespecifically called out. Similarly, the descriptions herein usecontainer, refill unit and product reservoir interchangeably whendiscussing the exemplary embodiments relating to status data andthreshold data. Therefore identifying data or an operation with a“refill unit” is not limiting the exemplary embodiment to a refill unithaving a container and a pump and in this context refill unit may be aproduct reservoir or container, unless noted otherwise.

The dispenser control 60 may read one or more pieces of status data fromthe data storage device 68, and use the data when performing one or morelogical operations to determine if the refill is a correct refill, is anauthentic or is an authorized refill (container or product reservoir).Based on the logical operations performed, the dispenser control 60 mayselectively send an output signal 63 to control operation of the productdispenser 10, and more specifically to control commencing with adispense event, or prevent a dispense event.

In some embodiments, the dispenser control 60 includes threshold data 78stored in memory, which the logic processor 62 uses to compare againstthe status data 76. Examples of threshold data 78 may include: thecurrent date, refill unit expiration time periods, a minimal volumelevel, a value indicative of the refill unit having previously beenused, type of fluid authorized to be dispensed by the dispenser, size ofthe container, dose size, authorized refill codes, codes for determiningwhether the refill identification number is authorized for theparticular dispenser, a required pattern, the number of allowed dosesfor the container size, viscosity of the fluid, and the like.

Data may ultimately be stored as bits of data consisting of binary onesand zeroes. Those skilled in the art will understand that binary datamay be transformed into hexadecimal numbers, alpha-numeric characters orother formats of data as may be required for processing by the logicprocessor 62. The threshold data 78 may be stored in the dispensercontrol 60, in for example, dispenser memory 64. Threshold data 78 maybe loaded into dispenser memory 64 at the time of manufacture, at thetime of installation, at some other predetermined time, downloadedthrough an intermediate device during field service. Alternatively,threshold data 78 may be retrieved via a network connection to a remotecomputing device. The threshold data 78 may be downloaded at somepredetermined time or in real time. In other instances, threshold datamay be written into the coded instructions executed by the logicprocessor.

In some exemplary embodiments, the dispenser control 60 reads the statusdata 76 from the data storage device 68 in the refill unit 27 andcompares it to the threshold data 78 stored in or retrieved by thedispenser control 60. The logic processor 62 performs logic operationson the data, i.e. the status data 76 and the threshold data 78, and inresponse selectively enables and/or disables a dispense event by sendingor not sending an output signal to the motor 30, or other mechanismcontrolling actuation of the pump 29, 34.

The following example illustrates one exemplary embodiment. To activatethe product dispenser 10, a user places his hand under the nozzle 40 ofthe product dispenser 10. The sensor 47, upon detection of the user'shand, sends a signal to the dispenser control 60 for the purpose ofinitiating a dispense event. The dispenser control 60 reads the statusdata 76 from the data storage device 68 associated with the refill unit27 installed in the product dispenser 10. In an exemplary manner, thedispenser control 60 reads the expiration date and number of dispensesremaining (collectively referred to here as the status data 76) from therefill unit 27. The logic processor 62 compares the status data 76 tothe threshold data 78. If the current date has not exceeded theexpiration date and if the number of dispenses remaining is greater thana predetermined minimum counter value, then the logic processor 62 sendsan output signal to the motor 31 to actuate the pump 29. If the logicprocessor 62 determines that the status data is outside the acceptableoperating range of the threshold data 78, then the logic processor 62disables the product dispenser by not sending an output signal to themotor 31.

In some embodiments, controller 60 causes the status data 76 to updatethe number of dispenses remaining in the refill unit 27. Accordingly, ifthe refill unit 27 is removed and put in a second dispenser, not shown,the second dispenser will be able to determine the number of dosesremaining in the refill unit 27. In this way, a user is prevented fromrefilling the container 26 by breaching the integrity of the container26 to add additional fluid in the container because once thepredetermined number of doses have been dispensed, the dispenser willnot dispense any more doses of fluid from the container 26.

With reference now to FIGS. 7 and 8, the refill unit 27 includes logicprocessor 82. The logic processor 82 may be a processor, amicroprocessor or a microcontroller, or the like similar to thosedescribed above with respect to dispenser control 60. The data storagedevice 68 (or memory 69) may be connected to the logic processor 82 viaa data bus, contacts, wireless connections, or the like. Status data 76stored in the memory 69 may be communicated to the dispenser control 60through logic processor 82. The logic processors 62, 82 may communicatedata therebetween using known data communication protocols. Notably, thedata may be communicated directly, i.e. by the direct connection ofelectrical conductors (shown schematically in FIG. 8), or wirelesslyusing the methods discussed above, e.g. Bluetooth (reference FIG. 7).When the product dispenser 10 is activated, the dispenser control 60will request data from the logic processor 82, which will retrieve thedata from memory and communicate the data to the logic processor 62.Accordingly, the logic processor 62 will selectively commence with adispense event in a manner consistent with the above describedembodiments. By selectively commence with, it is meant that the logicprocessor 62 may or may not send an output signal to the motor 31 todispense product based on validating data stored in and retrieved frommemory 69 resident with the refill unit 27. If logic processor 62enables the product dispenser 10 to dispense product, instructions aresent to logic processor 82 on the refill unit 27 to modify (or add to)the data stored in memory 69. For example, the logic processor 82 mayalter the status data 76 by decrementing a counter associated with thecontainer volume. Skilled artisans will appreciate that when the refillunit 27 has been depleted of product, the status data 76 of the refillunit 27 may be updated to indicate that this particular refill unit 27has expired and may not be reused.

Each of the logic processors 62, 82 may be programmed to encrypt thedata transferred between the refill unit 27 and the dispenser control60. The data encryption may be facilitated by executing codedinstructions on each of the logic processors 62, 82 respectively. Thecode may be embedded in memory, i.e. firmware, or otherwise stored foraccess by the logic processors 62, 82.

In general, unencrypted data communicated between components in anysystem is susceptible to exploitation. This is especially true forwireless data communication. As it pertains to product dispensers, itmay be possible to capture unencrypted data and/or learn how unencrypteddata is communicated between the dispenser control and the refill unitfor the purpose of writing fraudulent status data to the memory. Theabsconders of data may then be able to replaced valid status data withunauthorized and altered status data. Even if the data is encryptedbefore it is transmitted, it still may be possible to analyze certainencryption patterns over numerous dispensing cycles. To obviate theseconcerns, in some exemplary embodiments, the programmed algorithmexecuted on the logic processors 62, 82 may use rolling codes or hoppingcodes that change how the data is encrypted virtually every time theprocessors 62, 82 communicate and read or write data to memory 69.

Rolling code encryption uses a secret key, also referred to as a messageauthentication code or MAC, which is unique to the dispenser control 60and authorized refill units 27. Numerous algorithms exist that utilizesecret keys or MACs. In one embodiment, the AES algorithm (AdvancedEncryption Standard algorithm) may be used to encrypt data transmittedbetween the dispenser control 60 and the refill unit 27. Any secret keysize (typically measured in bits) that is supported by the AES algorithmmay be chosen with sound judgment. In one embodiment, a 128-bit key isused to prevent the use of unauthorized refill units.

Symmetric encryption is also known as private key cryptography, and iscalled so because the private key used to encrypt and decrypt themessage must remain secure. Anyone with access to the private key candecrypt the data. A sender, e.g. dispenser control 60, encodes a messageinto cipher text using a key, and the receiver, e.g. refill unit 27,uses the same key to decode it. The sender can use this encryptionmethod as either a “stream” cipher or a “block” cipher, depending on theamount of data being encrypted or decrypted at a time. A stream cipherencrypts data one character at a time as it is sent or received, while ablock cipher processes fixed chunks of data. Common symmetric encryptionalgorithms include Data Encryption Standard (DES), Advanced EncryptionStandard (AES), and International Data Encryption Algorithm (IDEA).

Asymmetric encryption, or public-key cryptography, is different than theprevious method because it uses two keys for encryption or decryption(it has the potential to be more secure). This type of cryptography usestwo keys, a “private key” and a “public key” to perform encryption anddecryption. The use of two keys differs from symmetric key cryptographybecause a single private-key does not need to be securely managed amongmultiple users.

In asymmetric cryptography, a public key may be freely available toothers and may be used to encrypt messages before sending the data. Adifferent, private key, remains with the receiver of cipher textmessages, which uses it to decrypt the data. Algorithms that use publickey encryption methods may include RSA and Diffie-Hellman. With thesemethods, a public key is freely available and is used to encryptmessages, while a different private key is used by the recipient todecrypt messages.

Hashing is another technique for encrypting data that may be used in theembodiments of the present invention. Hashing creates a unique,fixed-length signature for a message or data set. Each “hash” is uniqueto a specific message, so minor changes to that message would be easy totrack. Once data is encrypted using hashing, it cannot be reversed ordeciphered. Hashing, though, not technically an encryption method assuch, is still useful for proving data hasn't been tampered with.

Any of the aforementioned encryption methods may be used with theembodiments described herein. However, other forms encryption anddecryption may also be implemented without departing from the intendedscope of coverage of the claimed subject matter.

With continued reference to FIG. 7, another exemplary embodimentincorporates batteries 51 into the refill unit 27. The batteries 51 maycomprise low power-density batteries, which may include coin cellbatteries (also known as button cell batteries). As is known in the art,a coin cell is known for its small size and light weight. However, whilea coin cell may be chosen because of its footprint, other types ofbatteries may be incorporated into the refill unit 27 without departingfrom the intended scope of coverage of the embodiments of the subjectinvention. For example, AAA cell alkaline batteries may be integratedinto refill unit 27. It will be readily seen that a fresh supply ofenergy from the onboard batteries is provided every time the refill unit27 is replaced.

The housing or collar of the refill unit 27 may be fashioned having oneor more recesses configured to receive or enclose the batteries 51. Aconductor plate 90 may electrically connect to the respective terminalends of the batteries 51 and to conductors 92, which extend to directthe flow of electrical current from the batteries 51 to the dispensercontrol 60, the motor 30 or other electrically powered component of theproduct dispenser 10. It should be realized that the batteries 51 mayalso supply power to the refill unit 27, i.e. the logic processor 82and/or data storage device 68.

With reference to all of the figures, an exemplary methodology ofauthenticating a replaceable product reservoir 26 is diagrammed in FIG.9. The methodology pertains to a product dispenser 10 having a physicalconstruction consistent with the description provided above. Morespecifically, the method relates to a product dispenser 10 thatvalidates data stored on a replaceable product reservoir 26. If thereplaceable product reservoir 26 is authentic (i.e. approved by thedispenser manufacturer), the product dispenser 10 will be enabled foruse. Otherwise, the product dispenser 10 is disabled. Similarmethodologies may be used to enable or disable the dispenser as afunction of one or more of the status data and threshold data identifiedabove.

At block 102 in the methodology includes providing a replaceable productreservoir 26 having a data storage device 68 associated with the productreservoir 26.

At block 105 in the methodology includes storing data on the datastorage device 68. In one particular embodiment, the data storage device68 stores data for read access by a logic processor 62. It is alsocontemplated to write data to the data storage device 68. Stateddifferently, block 105 may comprise storing data and writing data to thedata storage device 68, i.e. a read-write data storage device 68.

At block 108 the logic processor 62 reads the status data from the datastorage device 68. In some embodiments, logic processor 62 reads thedata when a dispense event is initiated by placing a hand in proximityto a sensor. Alternatively, the logic processor 62 may automaticallyread the data every time the replaceable product reservoir 26 isinstalled into the product dispenser 10. Some embodiments include areplaceable product reservoir 26 that has its own logic processor 82,where the logic processor 82 is directly connected to the data storagedevice 68. In this particular embodiment, engaging logic processor 62 toread status data requires sending a request for information to logicprocessor 82, which in turn retrieves data from the data storage device68 and then sends it back to the logic processor 62.

At block 120 in the status data is encrypted before it is communicatedbetween the logic processors 62, 82. The logic processors 62, 82 executecoded instructions that encrypt the data. The coded instructions mayemploy rolling codes to randomize the data so that would-be hackerscannot abscond with the data and thereby create an unauthorizedduplicate product reservoir or bypass the authenticating features ofthis invention.

Once data has been received by the dispenser control 60, the logicprocessor 62 compares the status data with threshold data (at block 110)to check that the status of the product reservoir 26 has not fallenoutside a range of acceptable operating parameters. The logic processor62 then generates an output based on the comparison in block 113.

If a dispense event has occurred that changes the status of thereplaceable product reservoir 26, the data is updated data on the datastorage device 68 at block 116. The data written to the storage device68 may relate to the amount of product remaining in the container or mayindicate that the replaceable product reservoir 26 is empty and shouldnot be used again.

The exemplary blocks may be performed in other orders. In addition, oneor more blocks may be eliminated. Further, additional blocks may becarried out between two or more blocks.

In some exemplary embodiments, when a refill unit 27 having a datastorage device 68 is inserted into the dispenser 10, controller 60 readsstatus data indicative of the amount of fluid left in refill unit 27.Upon dispensing one or more dispenses, controller 60 causes status dataindicative of the amount of fluid left in refill unit 27 to be writtento the storage device 68. In this exemplary embodiment, attempting torefill the refill unit 27 with additional product is prevented becauseonce the predetermined volume of fluid has been dispensed from therefill unit 27, controller 60 will prevent dispenser 10 from dispensingany more fluid from the refill unit 27. Because the status dataindicative of the amount of fluid left in refill unit 27 is updated inthe storage device 68, which is attached to the refill unit 27, even ifa refilled refill unit 27 is placed in a new dispenser 10, thecontroller 60 in the new dispenser 10 would be able to determine thatthe refill unit 27 was refilled and prevent any fluid from beingdispensed from the refilled refill unit.

Having illustrated and described the principles of the dispensing systemin one or more embodiments, it should be readily apparent to thoseskilled in the art that the invention can be modified in arrangement anddetail without departing from such principles.

What is claimed:
 1. A product dispensing system, comprising: a refillunit containing a dispensable fluid product, the refill unit having anoutlet; a dispenser housing for retaining the refill unit, wherein therefill unit is removable from the dispenser housing; a pump for pumpingfluid out of the refill unit; a pump actuator for causing the pump topump the fluid; a read-write data storage device secured to the refillunit, the read-write data storage device storing status data; and, adispenser control having a first logic processor and dispenser memory;wherein the first logic processor receives at least one piece of statusdata indicative of the amount of fluid in the refill unit and at leastone piece of data indicative of the identity of the refill unit from thedata storage device; wherein the dispenser controller determines if theidentity of the refill unit is within a threshold data and dispensesfluid if the identity of the refill unit is in the threshold data; andwherein the dispenser controller writes status data to the read-writestorage device that includes the volume of fluid removed from the refillunit; wherein the refill unit comprises an on-board power source that isremoved from the dispenser with the refill unit and inserted into thedispenser with the refill unit.
 2. The product dispensing system ofclaim 1, wherein the status data is encrypted.
 3. The product dispensingsystem of claim 1, wherein the on-board power source is one or morebatteries.
 4. The product dispensing system of claim 1, wherein therefill unit comprises a container and a collar secured to the container,and wherein the on-board power source is located on the collar.
 5. Theproduct dispensing system of claim 1, wherein the pump is connected tothe refill unit and is removed and replaced with the refill unit.
 6. Theproduct dispensing system of claim 1 further comprising two or morecontacts for transferring power from the on-board power source to thedispenser.
 7. The product dispensing system of claim 1 wherein theread-write data storage device comprises data indicative of the refillexpiration date.
 8. The product dispensing system of claim 1 wherein theread-write data storage device comprises data indicative of anauthorization code.
 9. A product dispensing system, comprising: a refillunit containing a dispensable fluid product; a dispenser housing forretaining the refill unit; a pump for pumping fluid out of the refillunit; a read-write data storage device secured to the refill unit, theread-write data storage device storing encrypted status data; and, adispenser control having a dispenser processor and dispenser memory;wherein the dispenser processor wirelessly receives at least one pieceof status data indicative of the amount of fluid in the refill unit andat least one piece of data indicative of the identity of the refill unitfrom the data storage device; and wherein the dispenser processorwirelessly writes at least one piece of status data to the read-writedata storage device that includes the volume of fluid remaining in therefill unit; wherein the refill unit comprises an on-board power sourcethat is removed from the dispenser with the refill unit and insertedinto the dispenser with the refill unit.
 10. The product dispensingsystem of claim 9, wherein the dispenser processor wirelessly receivesat least one piece of status data from the read-write data storagedevice that is indicative of the expiration date of the refill unit; andwherein the dispenser processor allows dispensing of the fluid productif the expiration date of the refill unit has not passed and preventsdispensing of the fluid product if the expiration date has passed. 11.The product dispensing system of claim 9, wherein the on-board powersource is one or more batteries.
 12. The product dispensing system ofclaim 9, wherein the refill unit comprises a container and a collarsecured to the container, and wherein the on-board power source islocated on the collar.
 13. The product dispensing system of claim 9,wherein the pump is connected to the refill unit and is removed andreplaced with the refill unit.
 14. The product dispensing system ofclaim 9 further comprising two or more contacts for transferring powerfrom the on-board power source to the dispenser.
 15. A productdispensing system comprising: a dispenser housing; a removable andreplaceable container containing a dispensable fluid product; a holderfor retaining the removable replaceable container; a pump for pumpingfluid out of the container; a read-write data storage device secured tothe container, the read-write data storage device storing status data;and, a dispenser control having a dispenser processor and dispensermemory; wherein the dispenser processor is configured to wirelesslyreceive at least one piece of status data indicative of the amount offluid in the container; wherein the dispenser processor is configured towirelessly receive at least one piece of data indicative of the identityof the container from the data storage device; wherein the dispenserprocessor is configured to wirelessly receive at least one piece of dataindicative of the authenticity of the container from the data storagedevice; and wherein the dispenser processor wirelessly writes at leastone piece of status data to the read-write data storage device thatincludes the volume of fluid remaining in the container; wherein therefill unit comprises an on-board power source that is removed from thedispenser with the refill unit and inserted into the dispenser with therefill unit.
 16. The product dispensing system of claim 15, wherein thestatus data is encrypted.
 17. The product dispensing system of claim 15,wherein the on-board power source is one or more batteries.